Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer
File:                     9jTAsSwZeK8-iQxSj8csj3R9uYA.cer (raw, json)
Hash identifier:          61ulo6e2VLh6IcN4jiI8IgGX2ZzxnFW41ng/oDzg5Cw=
Subject key identifier:   F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02BA99
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 03 Jun 2026 14:53:58 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 139846
                          IP: 103.186.144.0/23
                          IP: 2400:71e0::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 16:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178841 (0x2ba99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  3 14:53:58 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A91C798A, serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1c:9d:3b:fc:fe:1d:72:a4:aa:c4:82:f9:78:
                    86:77:f1:84:3b:f7:93:6d:bf:a1:d0:8f:98:dd:1b:
                    e2:4b:4c:ce:fc:df:e3:a5:a4:03:95:f9:63:8d:0b:
                    0e:6f:6e:09:8d:e1:37:7e:af:cd:c7:f8:33:11:71:
                    9c:ca:1c:de:42:61:6f:15:30:e7:7f:ee:ef:f7:0a:
                    8e:d6:27:e8:f4:94:85:df:85:3f:40:a3:47:fa:cb:
                    3c:c2:10:af:a3:e5:a9:96:58:7f:d3:1e:f2:e5:e3:
                    cb:40:0a:c2:46:50:05:47:18:33:9a:1a:74:c4:1e:
                    e0:85:14:fd:2a:08:ce:67:e3:12:f4:dd:15:e7:4d:
                    30:97:38:a7:ef:31:95:f3:34:9c:6c:d1:3d:43:c1:
                    5d:45:0c:66:26:60:b4:6c:92:be:8d:1b:ba:b7:34:
                    a7:ed:aa:cf:7c:86:38:b9:3a:b3:19:c8:96:1c:f5:
                    34:9e:eb:96:7d:d3:ac:82:57:82:ce:9d:2d:90:87:
                    3f:e2:4c:38:23:d0:d7:8e:5b:e9:27:79:25:41:16:
                    37:ff:a9:96:b0:85:91:b9:78:2b:91:e5:76:66:82:
                    c0:83:bf:8b:56:0c:d3:3f:1c:3d:11:44:a0:b4:6a:
                    66:94:fc:a4:da:7d:76:ee:53:29:93:e7:74:35:c9:
                    d0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139846

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.144.0/23
                IPv6:
                  2400:71e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:39:54:30:30:c9:07:37:e9:d2:1a:a3:7f:1b:79:54:a8:ee:
         0b:f4:dd:7c:41:0e:51:48:1f:7b:ae:40:d1:7d:1a:c1:1d:2c:
         09:66:1f:c8:cf:8c:1d:6d:30:dc:47:09:7d:5b:f2:61:f4:de:
         99:9b:c2:8a:97:af:2e:a0:46:86:4f:58:bb:b0:03:9d:1e:a1:
         e3:77:27:4f:be:19:3c:0b:d5:a0:01:9e:3f:01:50:8f:6d:35:
         80:b4:c1:25:bc:d4:c9:ee:77:d1:b0:b6:dc:df:1f:3c:fe:63:
         e1:e0:e6:50:e5:27:b5:91:c5:40:d4:b6:e2:52:11:df:ac:b7:
         13:cd:94:73:e2:06:8b:0a:4b:52:18:33:51:c0:47:d8:cb:b2:
         35:24:fe:c6:5a:30:a6:f0:a2:64:13:de:ce:43:4b:3c:71:8f:
         d9:92:77:40:4e:3b:5c:06:4b:cf:e7:9e:31:05:7a:48:1c:10:
         ac:8a:6d:79:fb:b1:87:e2:e0:21:5b:49:ce:3e:12:62:a3:11:
         32:cb:b0:70:19:7c:64:f2:f9:5c:54:ee:e4:c6:f2:aa:b0:a1:
         2b:c1:b8:63:0f:67:81:ea:3f:c7:a6:af:00:14:4a:b7:0b:4a:
         fe:92:81:c9:31:6a:1b:66:cc:e3:a3:8f:01:5f:bb:f5:3c:a8:
         1f:15:0d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:17:22 2026 by rpki-client